Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
File:                     SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft (raw, json)
Hash identifier:          Xc2Mzb7CP+9zRu6qaZTpq+N1PQbL2oXU+9jFZm1TXGM=
Subject key identifier:   B3:AD:97:34:1D:E9:7C:21:37:95:DF:3B:10:B0:62:84:A1:DC:1F:27
Authority key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
Certificate issuer:       /CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
Certificate serial:       3352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
Manifest number:          3352
Signing time:             Wed 20 Aug 2025 15:22:07 +0000
Manifest this update:     Wed 20 Aug 2025 15:22:07 +0000
Manifest next update:     Wed 27 Aug 2025 15:22:07 +0000
Files and hashes:         1: SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl (hash: LJoh6v1n8Vv2FLyrUWXwobvVW1nW8XcCQgyf4OknQAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl
                          rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 15:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13138 (0x3352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182EC4, serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
        Validity
            Not Before: Aug 20 15:22:07 2025 GMT
            Not After : Aug 27 15:22:07 2025 GMT
        Subject: CN=68a5e81f-c5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:10:5c:0a:ca:5e:76:71:ef:d6:6c:43:1e:
                    9d:7b:be:27:52:32:14:d9:02:9e:db:2a:7c:a6:68:
                    14:36:90:6b:ff:f6:74:f4:4e:bb:a4:61:7a:0f:cc:
                    37:3a:d5:ab:43:51:53:77:e8:4c:1a:d1:f1:ae:45:
                    a6:de:9e:81:ee:be:e4:03:4c:29:14:8a:45:0f:b7:
                    4d:c6:b3:15:e5:16:92:07:f4:a2:00:d3:f0:e7:8a:
                    35:9d:80:03:92:ab:28:6e:94:a2:a9:ce:03:26:59:
                    20:b3:d5:70:ab:ac:d8:4d:2f:ef:18:05:d9:8f:f0:
                    a0:5f:c5:91:5a:25:ac:8e:78:c5:53:27:be:03:12:
                    52:3e:d7:49:82:bd:0b:d9:54:7b:13:f7:17:0f:6a:
                    6d:d1:e7:bb:8b:92:d4:20:d7:3f:a6:b4:fe:7c:da:
                    14:ec:ae:68:cc:a3:4d:2d:0a:d1:6a:88:2b:fc:20:
                    9c:e3:11:cb:c5:f9:5d:36:4e:46:d7:87:4c:f9:26:
                    b5:d5:20:b4:cf:fd:c4:84:32:c1:de:a4:70:08:e1:
                    28:b9:6b:cb:84:80:39:90:ff:f8:09:a4:a5:e3:88:
                    31:c9:c6:b7:42:fa:31:82:7d:c5:01:07:c6:dc:e5:
                    30:6b:a8:0a:7d:d6:b6:7c:6f:82:77:c5:66:e6:08:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:97:34:1D:E9:7C:21:37:95:DF:3B:10:B0:62:84:A1:DC:1F:27
            X509v3 Authority Key Identifier:
                keyid:4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:c4:90:21:e0:de:a0:61:44:9d:41:43:fa:80:3a:9c:75:
         31:f1:06:81:0d:cd:82:0d:f4:73:ac:45:df:0d:1e:58:05:48:
         34:08:b8:03:af:73:c8:4b:86:bf:38:5d:16:ea:f1:06:02:0c:
         ef:0b:0b:50:b2:a3:ec:73:bc:2c:3e:07:51:99:09:78:bf:b9:
         65:4a:71:8a:cb:de:e7:23:82:76:d1:fc:71:b9:ac:db:55:e4:
         ae:e9:f3:fd:ed:7b:96:46:ae:0c:37:ac:da:87:77:65:b0:6a:
         51:af:70:7c:f0:e9:b4:2b:93:cb:e9:7b:2e:be:e3:95:83:21:
         69:ad:41:c5:eb:10:be:b6:f5:eb:fa:5c:1b:90:90:09:93:4c:
         33:3d:38:d7:63:09:95:6f:fe:e3:9d:76:ce:c6:2d:b2:fc:29:
         4a:ae:c5:c6:3d:23:94:44:f9:21:5d:43:ed:e4:82:d6:ae:9b:
         34:0e:3a:f2:fd:95:f1:6a:13:ac:f7:3e:f2:eb:14:2b:c9:79:
         e5:b0:fd:37:7c:af:f6:fa:e1:19:13:a4:6e:b7:93:59:16:2e:
         63:d7:28:fe:87:7b:15:85:5f:31:02:2d:38:2b:d2:42:5f:a3:
         84:ca:c8:b9:44:de:e7:b0:7f:c5:ed:38:50:83:42:99:39:4b:
         e7:d5:79:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJFQzQxMTAvBgNVBAUTKDRCMkE4NjY1OTU0NUY5MjU2NjM1NDI0N0E0RjA4RjND
RTVCRTZDMEQwHhcNMjUwODIwMTUyMjA3WhcNMjUwODI3MTUyMjA3WjAYMRYwFAYD
VQQDEw02OGE1ZTgxZi1jNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA020QXArKXnZx79ZsQx6de74nUjIU2QKe2yp8pmgUNpBr//Z09E67pGF6D8w3
OtWrQ1FTd+hMGtHxrkWm3p6B7r7kA0wpFIpFD7dNxrMV5RaSB/SiANPw54o1nYAD
kqsobpSiqc4DJlkgs9Vwq6zYTS/vGAXZj/CgX8WRWiWsjnjFUye+AxJSPtdJgr0L
2VR7E/cXD2pt0ee7i5LUINc/prT+fNoU7K5ozKNNLQrRaogr/CCc4xHLxfldNk5G
14dM+Sa11SC0z/3EhDLB3qRwCOEouWvLhIA5kP/4CaSl44gxyca3Qvoxgn3FAQfG
3OUwa6gKfda2fG+Cd8Vm5gjydwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOtlzQd
6XwhN5XfOxCwYoSh3B8nMB8GA1UdIwQYMBaAFEsqhmWVRfklZjVCR6TwjzzlvmwN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkVDNC9DOTQyMDMwMDYx
QTExMUUyODRCNkEwODUyOTc5QkIyMC9TeXFHWlpWRi1TVm1OVUpIcFBDUFBPVy1i
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N5cUdaWlZGLVNWbU5VSkhwUENQUE9XLWJBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkVDNC9DOTQyMDMwMDYxQTExMUUyODRCNkEwODUyOTc5QkIyMC9TeXFHWlpWRi1T
Vm1OVUpIcFBDUFBPVy1iQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvfMSQIeDeoGFEnUFD+oA6nHUx8QaBDc2CDfRzrEXfDR5YBUg0CLgD
r3PIS4a/OF0W6vEGAgzvCwtQsqPsc7wsPgdRmQl4v7llSnGKy97nI4J20fxxuazb
VeSu6fP97XuWRq4MN6zah3dlsGpRr3B88Om0K5PL6XsuvuOVgyFprUHF6xC+tvXr
+lwbkJAJk0wzPTjXYwmVb/7jnXbOxi2y/ClKrsXGPSOURPkhXUPt5ILWrps0Djry
/ZXxahOs9z7y6xQryXnlsP03fK/2+uEZE6Rut5NZFi5j1yj+h3sVhV8xAi04K9JC
X6OEysi5RN7nsH/F7ThQg0KZOUvn1Xmn
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:28:47 2025 by rpki-client